---
title: "Get effective human factor auth policy"
method: GET
path: "/v1/auth/human-factor-auth"
tags: ["Authentication"]
---

# Get effective human factor auth policy

`GET /v1/auth/human-factor-auth`

## Request

- Base URL: `https://api.1claw.co`
- URL: `https://api.1claw.co/v1/auth/human-factor-auth`
- Auth: HTTP bearer

Returns the resolved HFA policy for treasury wallet send, swap, and export.
Precedence: user override → spend policy → platform defaults.

## Response `200`

Effective HFA policy

- HumanFactorAuthResponse
  - `policy` HumanFactorAuthPolicy, required
    - `send` 'password_or_passkey' | 'passkey_only' | 'passkey_required' | 'password_only' | 'reauth_token_only'
    - `swap` 'password_or_passkey' | 'passkey_only' | 'passkey_required' | 'password_only' | 'reauth_token_only'
    - `export` 'password_or_passkey' | 'passkey_only' | 'passkey_required' | 'password_only' | 'reauth_token_only'
    - `conditional` object
      - `require_passkey_above_usd` string, nullable
      - `require_passkey_for_new_recipient` boolean
  - `source` string, required: user | platform_app | spend_policy | default

## Other responses

- `403`: Insufficient permissions

---

[API](https://skmtc.dev/1claw/apis/1claw-api.md) · [All operations](https://skmtc.dev/1claw/apis/1claw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/1claw/apis/1claw-api/revisions/5fa0918f3b41?raw)